CVE-2026-90410

A flaw was found in the Linux kernel's Serial Peripheral Interface (SPI) davinci component. A timing issue exists during the deallocation of the SPI controller, where its memory can be freed before the associated interrupt handler is fully drained. This can lead to a use-after-free vulnerability, allowing a late interrupt to access already-freed memory. The most significant consequence of this flaw is system instability, potentially leading to a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.